Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/FE1B57A8164611F1BE809CEFDAE4EC9C.roa
File: FE1B57A8164611F1BE809CEFDAE4EC9C.roa (raw, json)
Hash identifier: Ve3RCW/q/y2pFA0BJHu2+tRYVuEEJVi+vVpApROhl0c=
Subject key identifier: 0F:8B:3D:D8:2D:A6:EA:3C:87:4B:AE:6C:5E:56:A7:3E:67:ED:9A:74
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 04AC
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/FE1B57A8164611F1BE809CEFDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 14:49:19 +0000
ROA not before: Mon 02 Mar 2026 14:49:15 +0000
ROA not after: Sat 02 Mar 2030 14:49:15 +0000
asID: 33763
IP address blocks: 160.242.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196 (0x4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 14:49:15 2026 GMT
Not After : Mar 2 14:49:15 2030 GMT
Subject: CN=69a5a36f-3c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:17:a3:2b:66:ec:c3:c9:07:2d:43:61:c5:
03:03:35:4f:2c:a8:3e:8e:1e:00:f9:2d:47:a9:17:
20:e8:c7:b7:c8:f4:a7:d1:82:7e:67:99:b1:71:4a:
2f:8e:6a:a0:a3:f1:46:20:f9:8d:e1:5a:80:12:62:
fa:85:40:85:ee:eb:32:aa:d2:ad:56:9d:78:9e:60:
80:f6:13:7f:2c:d8:2e:66:03:c1:66:bb:fc:f2:31:
cf:f4:31:07:2c:34:c0:06:d4:ca:c5:d0:70:82:13:
7f:3f:a8:c8:a3:fc:99:ac:3a:f4:0d:08:eb:25:4e:
0a:a3:27:9d:7f:06:e9:2f:a1:e9:85:6b:6a:55:2c:
5f:99:8f:df:b1:8d:45:fb:d2:7b:d0:bf:48:7d:25:
29:67:4f:9e:8b:09:a2:7c:7e:1d:7d:dc:7b:83:95:
9e:67:21:58:8a:10:e6:ba:2a:cd:41:15:7b:e9:88:
c5:a8:98:01:e6:cb:20:d5:fe:cb:13:9e:50:28:b6:
36:b3:21:56:f3:65:cf:c9:c4:94:b9:3d:5f:20:66:
f9:b4:f9:6c:0e:08:11:01:0b:38:e9:22:eb:3e:4d:
d0:92:36:20:d7:60:11:65:64:fb:7f:70:e9:33:10:
82:4f:ff:17:b1:c3:88:f8:4b:d4:df:72:95:f1:23:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8B:3D:D8:2D:A6:EA:3C:87:4B:AE:6C:5E:56:A7:3E:67:ED:9A:74
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/FE1B57A8164611F1BE809CEFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.30.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:96:70:32:89:bc:b7:f8:34:d1:60:aa:fb:09:be:5a:52:30:
76:64:01:b0:c2:af:43:01:dc:32:ce:c9:84:34:41:e8:37:cb:
f7:9c:34:bf:fb:99:94:4e:99:81:6e:f6:cd:e4:5a:ac:e6:f9:
0e:26:08:77:44:b5:b6:73:50:f8:35:6b:5b:61:f1:fd:d3:20:
43:19:4f:fd:cb:8b:75:17:5c:fa:4f:fc:a6:70:b3:ae:5a:7e:
da:45:e6:34:86:4a:67:76:88:f8:76:77:95:0a:80:03:45:62:
0e:4b:f9:ce:e9:bd:45:87:13:2d:c2:34:45:ab:bf:49:47:7b:
a5:a0:6f:de:f8:28:f0:d4:6b:2c:c6:10:35:21:ff:7e:74:b8:
9f:78:68:a5:66:ff:22:00:7e:21:d6:43:f2:52:ec:55:65:a1:
6c:94:f7:27:6f:08:08:95:29:be:0e:81:7c:c3:20:9b:87:a1:
ca:ec:5d:d6:43:48:4d:da:60:75:86:ed:0f:c7:2a:d3:69:8a:
8b:62:78:1c:88:51:d3:fb:40:a6:dc:6c:8d:b2:9b:8e:dd:78:
06:38:15:a4:a4:7a:89:d3:56:17:25:33:c7:f6:86:6f:37:aa:
7a:f4:ee:58:f1:1c:c8:8f:a5:a8:0e:64:e8:2a:bf:64:b1:87:
de:b5:d4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:23 2026 by rpki-client